Cookie policy

The cookies we use

Cookie	What it's for	How long
pet-pawtrait-session	Remembers your visit: the portraits you've just made, your basket and whether you're signed in.	Until you close your browser or 2 hours of inactivity
XSRF-TOKEN	Protects forms against "cross-site request forgery", a common kind of attack.	2 hours
remember_web_…	Keeps you signed in after you use an email sign-in link.	Up to 400 days, or until you sign out

Our bot check (Cloudflare Turnstile), shown on some forms, may store a small amount of information in your browser to tell people and bots apart. It isn't used for advertising or to track you across other websites.

When you pay, you're taken to Stripe's secure checkout, which sets its own cookies to process the payment and prevent fraud. See Stripe's cookie policy.

Why we don't ask for consent

UK law (the Privacy and Electronic Communications Regulations) allows cookies that are strictly necessary for a service you've asked for without asking first. All of ours are. If we ever add other cookies, we'll ask for your permission before using them and update this page.

Controlling cookies

You can block or delete cookies in your browser settings. If you block these ones, parts of the site (such as your basket and signing in) won't work.